Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File:                     1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier:          H9SqVxRP2oeEZ9Iwy7gkIzZ6IxCluzyJvLjfSa7kb8c=
Subject key identifier:   44:D9:00:B9:09:5C:2C:92:BF:EC:7F:B4:8E:E6:9A:0F:FA:82:07:A0
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer:       /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number:          0275
Signing time:             Wed 13 May 2026 02:10:05 +0000
Manifest this update:     Wed 13 May 2026 02:10:04 +0000
Manifest next update:     Wed 20 May 2026 02:10:04 +0000
Files and hashes:         1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: 3Qttrxr5hbO3+4qnRB5+F6kBqBXwQ/Pwj1G/96EaVcM=)
                          2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: s7Oir+kBK6V7D0xuqpSVbybxeozVx8Hx3+pya2RC/X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
                          rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
        Validity
            Not Before: May 13 02:10:04 2026 GMT
            Not After : May 20 02:10:04 2026 GMT
        Subject: CN=6a03dd7c-8bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:19:74:28:b7:b7:f2:9c:a7:de:0f:94:e4:
                    e1:63:e1:e9:23:7a:aa:0c:ff:c2:a5:07:3c:5a:14:
                    49:3d:a4:4a:db:7d:9b:12:71:ab:32:4a:83:f5:f8:
                    40:44:c9:5c:dd:a0:75:e9:d4:bf:90:82:d6:f0:23:
                    ab:4c:74:00:5c:b9:45:da:e9:70:b6:0f:1c:99:46:
                    9d:6f:16:b4:0e:e8:4b:7a:7d:c6:19:d5:ce:0f:86:
                    77:cb:ea:49:60:9d:b0:35:db:f3:44:ac:23:4b:0d:
                    a6:6d:32:a3:c5:d9:bb:a2:d4:8c:49:f1:e7:31:b5:
                    24:2f:4f:af:29:be:07:ff:7c:83:7f:f6:4a:a9:d2:
                    ee:26:44:43:d6:85:0f:39:b0:72:e4:7b:1d:dc:0c:
                    ea:c5:98:2d:75:b8:2d:5f:ae:dd:e1:6a:84:fa:f3:
                    98:8c:8a:81:ad:68:5f:ad:35:10:d8:ab:01:18:a3:
                    c4:86:fb:22:11:c3:b6:2b:43:82:da:c0:96:aa:95:
                    ae:8d:15:ce:31:de:90:d9:ef:48:2c:bb:38:09:37:
                    60:94:63:dd:fa:54:4c:e5:1f:00:78:0a:70:ad:21:
                    f4:34:4b:ee:bf:9c:fb:23:29:fa:83:4e:5b:f2:a1:
                    02:63:c6:0a:c3:59:bb:e4:dc:5b:a4:b2:0a:f2:52:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:00:B9:09:5C:2C:92:BF:EC:7F:B4:8E:E6:9A:0F:FA:82:07:A0
            X509v3 Authority Key Identifier:
                keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e5:84:82:df:c3:10:14:45:2d:a4:18:c8:e6:54:aa:47:d9:
         fe:14:b5:52:19:4c:ce:c0:1d:65:c2:e4:62:ff:d8:d1:3e:cc:
         12:dc:88:32:f3:94:33:b6:8e:55:b2:0a:88:6e:16:53:28:af:
         4f:9d:41:c6:bd:08:c4:cf:ed:c2:6a:ff:70:10:37:86:05:52:
         cc:a4:f7:51:4a:a3:4d:8f:98:8f:55:62:1d:62:2b:73:1b:bb:
         6c:53:79:a0:9f:22:30:74:8d:7d:ce:61:f3:ea:0b:d6:ff:2c:
         35:56:93:95:22:ed:46:1d:24:62:9b:94:b9:2b:53:79:10:bf:
         42:dd:a7:6f:7f:03:ec:0a:95:bf:a1:c4:18:d9:83:11:82:49:
         3a:f9:8f:24:dd:ea:7d:64:bf:6f:98:a3:2c:30:aa:0c:85:cc:
         ac:9c:37:15:c8:79:e8:b9:96:b3:f6:39:93:41:f4:fc:7c:dc:
         ee:75:83:3f:f2:4f:81:c3:84:6b:8a:4b:9f:1b:75:a0:b1:4d:
         aa:cc:4e:de:33:5f:e1:c2:93:cc:47:af:f0:23:7b:f9:10:26:
         59:b1:c9:6c:7f:31:4c:7e:2c:3c:b6:f7:29:29:64:9f:2f:8b:
         de:73:75:ad:7e:5c:3c:4b:28:9c:0e:c7:72:ce:26:02:f2:65:
         e9:4a:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:52 2026 by rpki-client